Dynamic VLAN Assignment ACS

I haven't done it myself but i have an example of a config for wireless access. Depending on the windows group membership the user is given a specific vlan.

So for each windows group there is a corresponding ACS group and in the Group Settings, the vlan config is done in the IETF RADIUS Attributes;

Enable (064) Tunnel-Type and select VLAN as the value for Tag1

Enable (065) Tunnel-Medium-Type and select 802 as the value for Tag1

Enable (081) Tunnel-Private-group-ID and insert the vlan number for Tag1

hope it help

ah ok.

cause i already set up this ACS group with all these attributes. But it didn=B4t work, and now i now why.

thanks for the information, i will test it soon.

mcaissie schrieb:

hi,

i was successful by setting my client up as user dynamically. then i put the user into a group and set up all attributes for vlan assignment.

but is there a chance to manage this without this user and group stuff ?

in IAS you set up a policy with some attributes which clients get to this policy. and then you can configure dynamic vlan assignment for this policy.

cause atm i don=B4t really understand how to configure all this with the "RADIUS Authorization Components"

bt snipped-for-privacy@gmx.de schrieb: